zc.async 1.5.4 pulls in dependency on ‘uuid’ package from pypi, which uses a non-thread-safe buffer for uuid generation (unlike the standard library uuid, which at least in Python 2.7 is thread-safe, creates a new buffer every time)